The EU AI Act (Regulation (EU) 2024/1689) regulates AI systems placed on the EU market according to risk. It applies in phases: prohibited practices since February 2, 2025; general-purpose AI model obligations since August 2, 2025; and Article 50 transparency obligations from August 2, 2026. The Digital Omnibus on AI (Regulation (EU) 2026/1744, in force since July 27, 2026) deferred the high-risk system obligations: stand-alone Annex III systems now apply from December 2, 2027 and AI embedded in Annex I regulated products from August 2, 2028.
Jurisdiction
EU
Enforcement
Phased: prohibitions from Feb 2, 2025; GPAI from Aug 2, 2025; Art. 50 transparency from Aug 2, 2026; high-risk (Annex III) from Dec 2, 2027; high-risk in regulated products (Annex I) from Aug 2, 2028.
Maximum penalty
Tiered (Art. 99): up to €35M or 7% of global turnover for prohibited practices (Art. 5); up to €15M or 3% for high-risk and GPAI obligation violations; up to €7.5M or 1% for supplying misleading information. SMEs/start-ups: lower of the two thresholds (Art. 99(6)).
Phased — in force; high-risk rules deferred
Prohibited practices (Art. 5) and AI literacy apply
General-purpose AI model obligations apply
Digital Omnibus on AI (Reg. 2026/1744) enters into force
Article 50 transparency obligations apply
Today ·
· 42 days
End of grace period for Art. 50(2) marking of systems placed on the market before Aug 2, 2026
· 407 days
High-risk obligations apply to Annex III systems
· 651 days
High-risk obligations apply to Annex I (regulated-product) systems
Deadline Facts
Applies from
407 days
Applies to Providers and deployers of high-risk AI in Annex III areas such as employment, credit scoring and education
Enforced by National authorities · fines up to €15M or 3% of worldwide turnover (Art. 99(4))
Status reviewed 27 Sep 2026
Deadline Facts
Applies from
651 days
Applies to AI that is, or is a safety component of, a product under the EU laws listed in Annex I (such as machinery, toys and medical devices) where third-party conformity assessment is required
Enforced by National authorities · fines up to €15M or 3% of worldwide turnover (Art. 99(4))
Status reviewed 27 Sep 2026
Status reviewed 27 Sep 2026. Sources: EUR-Lex — Regulation (EU) 2024/1689 (AI Act); White & Case — EU AI Omnibus enters into force, amending the AI Act; Gibson Dunn — EU AI Act Omnibus Agreement. Not legal advice.
Sorted by coverage level. Full coverage shown first.
62 vendors
| Vendor | HQ | Founded | Size | Pricing | Coverage | Last checked |
|---|---|---|---|---|---|---|
| Saidot | Helsinki, Finland | 2018 | 11-50 | No public pricing listed; contact sales implied via demos and sign-ups. | Full | Sep 21, 2026 |
| LatticeFlow AI | Zurich, Switzerland | 2020 | 11-50 | No public pricing. Enterprise platform sold via direct sales. Contact sales for demo and pricing. | Full | Sep 21, 2026 |
| Enzai | Belfast, United Kingdom | 2021 | 1-10 | SaaS platform, enterprise subscription. No public pricing listed. Contact sales via enz.ai. | Full | Sep 21, 2026 |
| Fairly AI | Kitchener, Canada | 2020 | 11-50 | On-premises or private-cloud deployments; quote-based. | Full | Sep 21, 2026 |
| Collibra AI Governance | New York, United States | 2008 | 1000+ | Enterprise subscription; contact sales for custom quote based on users, assets, modules. | Full | Sep 21, 2026 |
| Monitaur | Boston, United States | 2019 | 11-50 | Enterprise annual subscription; no public pricing listed. Forrester Wave cited 'pricing flexibility and transparency' as a highest-score criterion. Contact sales for quotes. | Full | Sep 21, 2026 |
| Trustible | Arlington, United States | 2023 | 11-50 | Contact sales for enterprise pricing; no public plans listed | Full | Sep 21, 2026 |
| ModelOp | Chicago, United States | 2018 | 11-50 | No public pricing listed; contact sales for enterprise quotes. | Full | Sep 21, 2026 |
| Modulos AI Governance | Zurich, Switzerland | 2018 | 11-50 | Contact for pricing | Comprehensive | Sep 21, 2026 |
| Luminos.Law (ZwillGen AI Division) | Washington, DC, United States | 2019 | 51-200 | Contact for pricing | Comprehensive | Oct 1, 2026 |
| DataRobot | Boston, United States | 2012 | 1000+ | Contact for pricing | Comprehensive | Sep 21, 2026 |
| 2021.AI | Copenhagen, Denmark | 2016 | 51-200 | Pricing is custom and tailored to use case, organization size, deployment model (on-prem or cloud), and selected modules. Contact sales required per their pricing page. | Comprehensive | Sep 21, 2026 |
| Naaia | Louveciennes, France | 2021 | 11-50 | No public pricing tiers; demo and quote requested via website. | Comprehensive | Sep 21, 2026 |
| Vanta | San Francisco, United States | 2018 | 501-1000 | Four plans: Essentials, Plus, Professional and Enterprise. No prices on vanta.com; its AWS Marketplace listing gives 12-month starting prices for 1-20 employees: Essentials $14,000, Plus $21,500, Professional $23,000. Enterprise is quoted. Third-party risk management is a separate product ($13,600 a year for up to 50 vendors on AWS). | Comprehensive | Oct 15, 2026 |
| HiddenLayer | Austin, United States | 2022 | 51-200 | Enterprise-only, contact sales for pricing. No public pricing listed on website. | Partial | Sep 21, 2026 |
| Lakera | Zurich, Switzerland | 2021 | 51-200 | Enterprise-focused SaaS. No public pricing listed. API-based pricing model expected. Contact sales. | Partial | Oct 15, 2026 |
| TrojAI | Saint John, Canada | 2019 | 11-50 | Enterprise-only, no public pricing. Contact sales at troj.ai. | Partial | Oct 15, 2026 |
| OneTrust AI Governance | Atlanta, United States | 2016 | 1000+ | Enterprise platform; contact sales for quote, no public pricing listed | Partial | Sep 21, 2026 |
| BABL AI | Iowa City, United States | 2018 | 11-50 | Contact for pricing | Partial | Sep 21, 2026 |
| IBM watsonx.governance | Armonk, United States | — | 1000+ | SaaS: Free trial (Essentials, max 200 resource units, max 3 use cases); Standard plan at USD $0.60 per resource unit (up to 50K records/evaluation, 500 inventories). Software (on-prem) priced by virtual processor core (VPC). | Partial | Sep 21, 2026 |
| Dataiku Govern | New York, United States | 2013 | 1000+ | Contact for pricing | Partial | Sep 21, 2026 |
| ServiceNow AI Control Tower | Santa Clara, United States | 2004 | 1000+ | Contact for pricing | Partial | Sep 21, 2026 |
| Securiti Data Command Center | San Jose, United States | 2018 | 501-1000 | Contact for pricing | Partial | Oct 1, 2026 |
| BigID | New York, United States | 2016 | 501-1000 | Contact for pricing | Partial | Sep 21, 2026 |
| Credo AI | Palo Alto, United States | 2020 | 51-200 | Contact sales for enterprise subscription quote. | Partial | Sep 21, 2026 |
| Holistic AI | London, United Kingdom | 2020 | 51-200 | Enterprise platform; contact sales for quote. | Partial | Sep 21, 2026 |
| ValidMind | Palo Alto, United States | 2022 | 11-50 | Custom pricing plans; contact sales. | Partial | Sep 21, 2026 |
| FairNow | McLean, United States | 2023 | 11-50 | Contact sales for quote; no public pricing listed | Partial | Oct 15, 2026 |
| TrustArc | Walnut Creek, United States | 1997 | 501-1000 | Enterprise subscription; contact sales for quote; modular pricing based on scope and modules | Partial | Sep 21, 2026 |
| Lasso Security | Tel Aviv, Israel | 2023 | 11-50 | Enterprise pricing only. Not publicly listed. | Partial | Sep 21, 2026 |
| Cranium | Short Hills, United States | 2023 | 51-200 | Enterprise pricing not publicly listed; annual subscription model referenced in Microsoft Marketplace listing.Microsoft Marketplace | Partial | Sep 21, 2026 |
| DeepKeep | Israel | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| QL Security | United Kingdom | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| ComplyAgent | European Union | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Traccia | United States | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Embed AI | Netherlands | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| LearnWize | Netherlands | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| PrivacyScrubber | United States | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| SetAIComply | European Union | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Attevera | European Union | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Complipath | Sweden | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| DisclosureProof | European Union | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| TRUSS Compass | Argentina | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| AIMS by Workflo | Hungary | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| LandingRed | Italy | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Adeptiv AI | India | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Meilynx | United States | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Scytale | Israel | 2021 | 51-200 | No public prices. Platform packages (Build, Scale, Enterprise), startup bundles (Build Starter, Build DFY, Build Stronger) and consulting packages (LaunchReady, StayReady, ComplianceShield) are all quoted after a demo. | Partial | Oct 15, 2026 |
| Hyperproof | Bellevue, United States | 2018 | — | No public prices or plan names on its pricing page; quoted on request. The AI-native third-party risk product includes a baseline of AI credits, with more sold at discounted tiers. | Partial | Oct 15, 2026 |
| Secureframe | San Francisco, United States | 2020 | 201-500 | Three plans: Fundamentals (starting at $7,500/year, one compliance framework), Complete (quote only; adds advanced versions of third-party risk, risk management, user access reviews, Trust Center and questionnaire automation, plus SSO/SCIM and custom integrations) and Defense (quote only; CMMC tooling such as SSP and POA&M). Additional workspaces are an add-on. | Partial | Oct 15, 2026 |
| Noma Security | New York, United States | 2023 | — | No prices on noma.security. AWS Marketplace lists the Noma Security Platform at $200,000 for a 12-month contract but doesn't say how many units that covers. | Partial | Oct 15, 2026 |
| Pillar Security | Tel Aviv, Israel | 2023 | 11-50 | Enterprise pricing only. Not publicly listed. | Adjacent | Sep 21, 2026 |
| Citrusˣ | Tel Aviv, Israel | 2021 | 11-50 | Enterprise pricing not publicly listed; demo available upon request. | Adjacent | Sep 21, 2026 |
| Drata | United States | 2020 | — | GRC plans (Foundation, Advanced, Enterprise) and Assurance plans (Trust Center and questionnaires) are quoted; drata.com shows no prices. Its AWS Marketplace listing charges a $25,000 platform fee for a 100-FTE organization plus $7,500 per framework, for a 12-month contract. | Adjacent | Oct 15, 2026 |
| Harmonic Security | London, United Kingdom | 2023 | — | Three packages, Explore, Guide and Command (marked most popular), are listed on Harmonic's pricing page without prices; the page offers a demo. AWS Marketplace lists "Harmonic Security - Explore" at $163.00 per user per year on a 12-month contract, with a 200-user minimum and private offers for custom quotes. | Adjacent | Oct 15, 2026 |
| Sprinto | India | 2020 | — | No public prices. Three plans (Foundation, Growth, Platform) are quoted by sales. Foundation includes 25+ automated frameworks, 20 AI-powered security questionnaires a year and an AI systems inventory. Add-ons include additional frameworks, AI Governance, Enterprise Risk Management, Enterprise Trust Management and Enterprise Vendor Risk Management. | limited | Oct 15, 2026 |
| F5 AI Guardrails | Seattle, United States | 1996 | — | F5 doesn't publish prices; its AI Guardrails page links to a free trial and a sales contact. AWS Marketplace lists F5 AI Guardrails (a container image for Amazon EKS) with a 12-month "F5 Guardrails AI" dimension at $100,000.00, but the listing says that price is a placeholder and that pricing is configured by F5 as a private offer. AWS Marketplace also lists F5 AI Red Team at $100,000.00 for a 12-month contract on its "Red Team Reports" dimension; the listing says cost scales with the number of report units bought and doesn't say how many reports that price covers. | limited | Oct 15, 2026 |
| WitnessAI | Mountain View, United States | 2023 | — | No prices on witness.ai. Its AWS Marketplace listing gives 12-month prices: WitnessAI for Enterprise at $180 per user (minimum 1,000 users, $180,000), WitnessAI Agentic Visibility at $24 per agent (minimum 2,500 agents, $60,000) and WitnessProtect model protection guardrail at $300,000. | limited | Oct 15, 2026 |
| CalypsoAI | Dublin, Ireland | 2018 | — | CalypsoAI is no longer sold on its own; calypsoai.com redirects to F5's AI Guardrails page. F5 doesn't publish prices for F5 AI Guardrails or F5 AI Red Team. AWS Marketplace shows a $100,000.00 12-month figure for F5 AI Guardrails but says it is a placeholder for a private offer, and lists F5 AI Red Team at $100,000.00 for a 12-month contract. | limited | Oct 15, 2026 |
| Fiddler AI | Palo Alto, United States | 2018 | — | Three plans: Free (real-time guardrails for hallucinations, toxicity, PII/PHI, prompt injection and jailbreaks, powered by Fiddler's Centor models); Developer at $0.002 per trace (adds unified observability with tests and experiments for agentic and predictive systems, custom evaluators and bring-your-own judge, role-based access control and SSO; SaaS only); and Enterprise, priced by sales (adds enterprise-grade guardrails and scale, SaaS, VPC or on-premises deployment, and a named customer success manager). The pricing page lists no trace or user limits. | limited | Oct 15, 2026 |
| Giskard | Paris, France | 2021 | — | No prices are published. Two plans: Open-source, a free Python library for local agent experiments with community support, and Professional, quoted on request ('Get your AI audited'). Professional adds automated audits with 50+ adversarial probes, evaluation dataset generation, SSO and role-based access, CI/CD integration through the SDK, on-premise, private cloud or SaaS deployment, and support with SLAs. Advisory on fixes and guardrails is an extra service. Giskard advertises a free Agentic Red Teamer trial with limited spots and an offer for startups and small teams, without stating terms for either. | limited | Oct 15, 2026 |
| Robust Intelligence | San Francisco, United States | 2019 | — | Robust Intelligence is no longer sold on its own and its site lists no prices. Cisco sells the technology as Cisco AI Defense, also without public prices: its offer description lists Advantage, Validation Essentials and Runtime Essentials packages, bought per AI application or as committed usage. AWS Marketplace lists Cisco AI Defense by private offer, and Cisco offers a self-service red-teaming tool, AI Defense: Explorer Edition, at no upfront cost. | limited | Oct 15, 2026 |
Independent ranking with documented criteria.
See our top picks for EU AI ActIn-depth answers about EU AI Act.
See which vendors support EU AI Act in your sector.
Legal status reviewed September 27, 2026. Informational summary only — not legal advice. Consult qualified counsel for specific obligations.